Skip to main content

Division of Administration
  3. Identity Theft Prevention Program

Identity Theft Prevention Program

Red Flag Rules

Identity theft - image iStockAs part of the Fair and Accurate Credit Transactions Act of 2003, the FTC issued final rules commonly referred to as the "Red Flag Rules" that require that any financial institution or creditor that regularly extends, renews, or continues credit to implement an identity theft prevention program that includes policies and procedures for detecting, preventing, and mitigating identity theft. The Red Flags Rule was effective November 1, 2008.

Vanderbilt University is subject to the FTC Red Flags Rule as a creditor for covered accounts issued and maintaned by both university central and medical center areas. Access Vanderbilt's Indentity Theft Prevention Policy (VUnetID required).

Annual Reporting

If your division, department, or program is affected by this policy, you are required to submit an annual report. Reports are due no later than August 31 each year. Download the reporting guidelines.